Korelogic Logo
"Crack Me If You Can" - DEFCON 2010
Back to [Teams] [Top]

Team 16Crack

Link to original writeup (external)

Graph of 16Crack's score over time


Members 1
Names Brad Tilley
Software 16Crack (Software written by 16Systems)
Hardware One Six-core AMD 1090T CPU

16Crack - Crack Me If You Can

We entered 16Crack in the DEFCON 2010 'Crack Me If You Can' password cracking contest which was sponsored by KoreLogic. Our team consisted of one person with one six core CPU (AMD 1090T) running 16Crack. According to the final results, we placed toward the lower/middle of the teams scoring 3,753 points. The winning team (hashcat) scored roughly 38,000 points.

Notes - Passwords in our list longer than 5 chars were cracked by CVSN pattern matching. Competing teams used hundreds of cloud computing CPUs and multiple high-end GPU cards. So this was not an evenly matched contest... we're not complaining, just stating facts.

Lessons learned - While consonant, vowel, number patterns are a valid approach to password cracking, having multiple approaches (brutes, dictionaries, etc.) is the most successful. Hashcat seems to be the best free password cracker in use today and JTR is still an awesome hash cracker.


Please contact us if you would like more information about our services, tools, or careers with us.
Privacy Policy : Copyright 2012. KoreLogic Security. All rights reserved